Lucene search

K
ubuntucveUbuntu.comUB:CVE-2016-2124
HistoryNov 09, 2021 - 12:00 a.m.

CVE-2016-2124

2021-11-0900:00:00
ubuntu.com
ubuntu.com
27
samba
smb1
authentication
plaintext
password
retrieval
kerberos

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.003

Percentile

69.5%

A flaw was found in the way samba implemented SMB1 authentication. An
attacker could use this flaw to retrieve the plaintext password sent over
the wire even if Kerberos authentication was required.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchsamba< 2:4.7.6+dfsg~ubuntu-0ubuntu2.26UNKNOWN
ubuntu20.04noarchsamba< 2:4.13.14+dfsg-0ubuntu0.20.04.1UNKNOWN
ubuntu21.04noarchsamba< 2:4.13.14+dfsg-0ubuntu0.21.04.1UNKNOWN
ubuntu21.10noarchsamba< 2:4.13.14+dfsg-0ubuntu0.21.10.1UNKNOWN
ubuntu22.04noarchsamba< 2:4.13.14+dfsg-0ubuntu1UNKNOWN
ubuntu22.10noarchsamba< 2:4.13.14+dfsg-0ubuntu1UNKNOWN
ubuntu23.04noarchsamba< 2:4.13.14+dfsg-0ubuntu1UNKNOWN
ubuntu23.10noarchsamba< 2:4.13.14+dfsg-0ubuntu1UNKNOWN
ubuntu24.04noarchsamba< 2:4.13.14+dfsg-0ubuntu1UNKNOWN
ubuntu14.04noarchsamba< anyUNKNOWN
Rows per page:
1-10 of 111

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.003

Percentile

69.5%